LICENSE ISSUING DEVICE/METHOD AND 
CONTENTS REPRODUCING DEVICE/METHOD 

BACKGROUND OF THE INVENTION 

The present invention relates to a license issuing de- 
vice, a contents reproducing device, a license issuing 
method, and a contents reproducing method. More particu- 
larly, the present invention relates to a license issuing de- 
vice, a contents reproducing device, a license issuing 
method, and a contents reproducing method in a contents pro- 
viding system that provides contents and a license for the 
contents separately. 

With the advance of digital technology, not only soft- 
ware programs but also productions such as pictures, music, 
and films are now managed and distributed as digital data. 
Further, in recent years, with remarkable progress of network 
technology, an environment enabling distribution of these 
productions to users via a network at any time and any place 
is about to be established. 

These contents as digital data do not deteriorate in 
quality by repeated replication. Therefore, providers of 
these contents are absolutely required to take measures for 
blocking unauthorized use of distributed contents such as du- 
plication without permission of the copyright holder. in 
this regard, development in cryptographic technology contrib- 



utes to improvement in the security level of the contents. 
As encryption schemes, known are DES as one type of symmetric 
encryption in which the same key is used for encryption and 
decryption, and RSA encryption as asymmetric encryption in 
which different keys are used for encryption and decryption. 

As the first example of technology for preventing unau- 
thorized use of contents, a selling scheme as follows is 
known. All or part of contents intended to be put on the 
market are encrypted in advance so that the contents are pro- 
tected from being used in the state as they are. A user pur- 
chases a license for releasing the encrypted state. in this 
scheme, ID unique to a device for reproducing the contents is 
recognized, and a license issued is encrypted including this 
ID. During reproduction, the ID retrieved by decrypting the 
license is compared with the ID unique to the reproducing de- 
vice. Only when the two IDs match with each other, reproduc- 
tion is performed. In this way, by limiting the device 
permitted to reproduce the contents, use of the contents by a 
device illegally duplicated is prevented. 

As the second example, there is known a technique where 
an administration center is established on a network. During 
reproduction of contents, a user who has already registered 
his or her name accesses the administration center via the 
network, and the administration center verifies the user by a 
password or the like. 



In the first example, once the user purchases the con- 
tents with the license, the user can reproduce the contents 
only with the licensed reproducing device. Therefore, al- 
though the contents are freely distributed, the reproducing 
5 device that can reproduce the contents is limited. in other 
words, the following problems arise. A program for which the 
license has been given in connection with a specific computer 
can only be used by accessing the specific computer. A piece 
of music for which the license has been given in connection 
10 with a home stationary player cannot be used with a portable 
terminal. A film for which the license has been given in 
connection with a portable video reproducing device can not 
be reproduced with a unit equipped with a home large screen 
display. 

15 In the second example, a means for connecting to a net- 

work and communicating with the administration center is in- 
evitably required. Therefore, use of contents with a 
reproducing device unequipped with such a function is lim- 
ited. 

20 

SUMMARY OF THE INVENTION 

According to one aspect of the present invention, the 
license issuing device writes license information permitting 
use of contents in a portable license storing device. The 
25 license storing device has uniquely identifiable device ID 



and a function of verifying the validity of a partner device. 
The license issuing device includes a verification means, a 
license information production means, and a first encryption 
means. The verification means verifies the validity of a li- 
cense storing device carried by a user. The license informa- 
tion production means produces license information permitting 
use of contents designated by the user when the license stor- 
ing device carried by the user is verified as valid by the 
verification means. The first encryption means encrypts the 
license information produced by the license information pro- 
duction means with the device ID of the license storing de- 
vice carried by the user and writes the encrypted license 
information in the license storing device carried by the 
user. 

In the above license issuing device, license information 
of contents desired by a user is written in the license stor- 
ing device as a portable individual hardware unit. There- 
fore, the user, who carries the license storing device in 
which the license information of the desired contents has 
been written, can receive the contents using any of contents 
reproducing devices in various forms compatible with the li- 
cense storing device. 

The license information is encrypted with the device ID 
of the license storing device. This makes it possible to 
prevent fraud such as attempting to receive contents using a 



license storing device in which encrypted license information 
has been illegally duplicated. 

The license issuing device writes only the license in- 
formation of the contents in the license storing device car- 
5 ried by the user. Therefore, even when the contents desired 
by the user is large in capacity, the time required for issu- 
ance of the license information does not increase- Also, 
there is no need to worry about the memory capacity of the 
license storing device. 
10 Moreover, since the data amount of the license informa- 

tion is small compared with the data amount of the contents, 
the user can obtain a large number of contents with one li- 
cense storing device. 

Preferably, the license information includes contents ID 
15 for identifying the contents designated by the user. 

Preferably, the license information includes a contents 
use condition representing a restriction during use of the 
contents designated fay the user. 

Preferably, the license information includes a decryp- 
20 tion key for decrypting the contents designated by the user. 

Preferably, the verification means includes a second en- 
cryption means. The second encryption means encrypts the de- 
vice ID of the license storing device carried by the user 
with a device key possessed by the license storing device 
25 carried by the user. And, the first encryption means en- 



5 



crypts the license information with the device id encrypted 
by the second encryption means and writes the encrypted li- 
cense information in the license storing device carried by 
the user. 

Preferably, the license issuing device is connected to 
the license storing device carried by the user via a network. 

In the above license issuing device, the user can re- 
ceive license information issued by the license issuing de- 
vice through a portable terminal accessible to the license 
issuing device via a network even when the user is away from 
the position of the license issuing device. 

According to another aspect of the present invention, 
the contents reproducing device decrypts encrypted contents 
and reproduces the decrypted contents. The contents repro- 
ducing device decrypts contents based on license information 
encrypted with device ID of a portable license storing device 
and stored in the license storing device, and reproduces the 
decrypted contents. The license storing device has a 
uniquely identifiable device ID and a function of verifying 
the validity of a partner device. The contents reproducing 
device includes a verification means, a decryption means, and 
a reproduction means. The verification means verifies the 
validity of a license storing device carried by a user. The 
decryption means decrypts license information stored in the 
license storing device carried by the user with the device ID 



of the license storing device when the license storing device 
carried by the user is verified as valid by the verification 
means. The reproduction means decrypts encrypted contents 
corresponding to contents of which use is permitted in the 
license information obtained by the decryption means and re- 
produces the decrypted contents. 

In the above contents reproducing device, the encrypted 
contents are decrypted using the license information written 
in the license storing device carried by the user and repro- 
duced. Therefore, the user, who carries the license storing 
device in which the license information of the contents de- 
sired has been written, can receive the contents using any of 
contents reproducing devices in various forms compatible with 
the license storing device. 

The license information written in the license storing 
device carried by the user is decrypted with the device ID of 
the license storing device. This makes it possible to pre- 
vent fraud such as attempting to receive contents using a li- 
cense storing device in which encrypted license information 
has been illegally duplicated. 

Preferably, the license information stored in the li- 
cense storing device carried by the user includes a decryp- 
tion key for decrypting the contents of which use is 
permitted in the license information, and the reproduction 
means decrypts the encrypted contents corresponding to the 



contents of which use is permitted in the license information 
with the decryption key included in the license information 
obtained by the decryption means. 

Preferably, the license information stored in the li- 
cense storing device carried by the user includes contents ID 
for identifying the contents of which use is permitted in the 
license information, and the reproduction means acquires the 
encrypted contents corresponding to the contents of which use 
is permitted in the license information using the contents ID 
included in the license information obtained by the decryp- 
tion means . 

Preferably, the contents reproducing device further in- 
cludes an accumulation means for accumulating encrypted con- 
tents, and the reproduction means acquires the encrypted 
contents corresponding to the contents of which use is per- 
mitted in the license information obtained by the decryption 
means from the accumulation means . 

In the above contents reproducing device, all of con- 
tents the user wish to reproduce can be accumulated in the 
accumulation means. This makes it possible to promptly re- 
produce contents having a large capacity that otherwise take 
time to be acquired. 

Preferably, the reproduction means acquires the en- 
crypted contents corresponding to the contents of which use 
is permitted in the license information obtained by the de- 



cryption means via a network. 

In the above contents reproducing device, contents are 
acquired on an as -needed basis during reproduction of the 
contents. This virtually provides an effect similar to that 
obtained when the user owns a contents server having an infi- 
nite capacity. 

Preferably, the license information stored in the li- 
cense storing device carried by the user includes a contents 
use condition representing a restriction during use of the 
contents of which use is permitted in the license informa- 
tion, and the reproduction means decrypts the encrypted con- 
tents corresponding to the contents of which use is permitted 
in the license information according to the contents use con- 
dition included in the license information obtained by the 
decryption means and reproduces the decrypted contents. 

Preferably, the contents reproducing device further in- 
cludes: a contents use condition updating means, an updated 
license information production means, an encryption means, 
and an overwriting means. The contents use condition updat- 
ing means updates a contents use condition included in the 
license information obtained by the decryption means after 
the reproduction of the contents by the reproduction means. 
The updated license information production means produces up- 
dated license information including the contents use 
condition updated by the contents use condition updating 
means replacing the contents use condition included in the 



replacing the contents use condition included in the license 
information obtained by the decryption means. The encryption 
means encrypts the updated license information produced by 
the updated license information production means with the de- 
5 vice ID of the license storing device carried by the user. 
The overwriting means overwrites the license information 
stored in the license storing device carried by the user with 
the updated license information encrypted by the encryption 
means . 

■LO The above contents reproducing device can update the 

contents use condition when the contents use condition 
changes after reproduction of the contents, and thus retain 
the correct contents use condition. 

According to yet another aspect of the present inven- 

15 tion, the contents reproducing device decrypts encrypted con- 
tents and reproduces the decrypted contents. The contents 
reproducing device decrypts contents based on license infor- 
mation encrypted with device ID of a portable license storing 
device encrypted with a device key of the license storing de- 

20 vice and stored in the license storing device, and reproduces 
the decrypted contents. The license storing device has a 
uniquely identifiable device ID and a function of verifying 
the validity of a partner device. The contents reproducing 
device includes a verification means, a decryption means, and 

25 a reproduction means. The verification means verifies the 



10 



validity of a license storing device carried by a user, and, 
when the license storing device is verified valid, encrypts 
the device ID of the license storing device with the device 
key of the license storing device to produce the encrypted 
5 device ID. The decryption means decrypts the license infor- 
mation stored in the license storing means carried by the 
user with the encrypted device ID produced by the verifica- 
tion means. The reproduction means decrypts encrypted con- 
tents corresponding to contents of which use is permitted in 

10 the license information obtained by the decryption means and 
reproduces the decrypted contents . 

According to yet another aspect of the present invention, 
the license issuing method writes license information permit- 
ting use of contents in a portable license storing device. 

15 The license storing device has uniquely identifiable device 
ID and a function of verifying the validity of a partner de- 
vice. The license issuing method includes a verifying step 
and a writing step. In the verifying step, the validity of a 
license storing device carried by a user is verified. In the 

20 writing step, when the license storing device carried by the 
user is verified as valid, license information permitting use 
of contents designated by the user is encrypted with device 
ID of the license storing device carried by the user, and the 
encrypted license information is written in the license stor- 

25 ing device carried by the user. 
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In the above license issuing method, license inf orniation 
of contents desired by the user is written in the license 
storing device as a portable individual hardware unit. 
Therefore, the user, who carries the license storing device 
in which the license information of the desired contents has 
been written, can receive the contents using contents repro- 
ducing devices in various forms. 

The license information is encrypted with the device ID 
of the license storing device. This makes it possible to 
prevent fraud such as attempting to receive contents using a 
license storing device in which encrypted license information 
has been illegally duplicated. 

In the above license issuing method, only the license 
information of the contents is written in the license storing 
device carried by the user. Therefore, even when the con- 
tents desired by the user is large in capacity, the time re- 
quired for issuance of the license information does not 
increase. Also, there is no need to worry about the memory 
capacity of the license storing device. 

Moreover, since the data amount of the license informa- 
tion is small compared with the data amount of the contents, 
the user can obtain a large number of contents with one li- 
cense storing device. 

According to yet another aspect of the present inven- 
tion, the contents reproducing method decrypts encrypted con- 

12 



tents and reproduces the decrypted contents. The contents 
reproducing method decrypts contents based on license infor- 
mation encrypted with device ID of a portable license storing 
device and stored in the license storing device. The license 
storing device has a uniquely identifiable device id and a 
function of verifying the validity of a partner device. The 
contents reproducing method includes a verifying step, a de- 
crypting step, and a reproducing step. in the verifying 
step, the validity of a license storing device carried by a 
user is verified. In the decrypting step, license informa- 
tion stored in the license storing device carried by the user 
is decrypted with the device ID of the license storing device 
when the license storing device carried by the user is veri- 
fied as valid in the verifying step. in the reproducing 
step, encrypted contents corresponding to contents of which 
use is permitted in the license information obtained in the 
decrypting step is decrypted, and the decrypted contents are 
reproduced. 

In the above contents reproducing method, the encrypted 
contents are decrypted using the license information written 
in the license storing device carried by the user and repro- 
duced. Therefore, the user, who carries the license storing 
device in which the license information of the contents de- 
sired has been written, can receive the contents using con- 
tents reproducing devices in various forms . 



The license information written in the license storing 
device carried by the user is decrypted with the device ID of 
the license storing device. This makes it possible to pre- 
vent fraud such as attempting to receive contents using a li- 
cense storing device in which encrypted license information 
has been illegally duplicated. 

Preferably, in the reproducing step, encrypted contents 
corresponding to contents of which use is permitted in the 
license information obtained in the decrypting step are ac- 
quired via a network. 

In the above contents reproducing method, encrypted con- 
tents are acquired via a network on an as-needed basis during 
reproduction of the contents. This virtually provides an ef- 
fect similar to that obtained when the user owns a contents 
server having an infinite capacity. 

Preferably, the license information stored in the li- 
cense storing device carried by the user includes a contents 
use condition representing a restriction during use of con- 
tents of which use is permitted in the license information, 
and in the reproducing step, encrypted contents corresponding 
to contents of which use is permitted in the license informa- 
tion are decrypted according to the contents use condition 
included in the license information obtained in the decrypt- 
ing step, and the decrypted contents are reproduced. 

Preferably, the contents reproducing method further in- 
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eludes an updating step, an encrypting step, and an overwrit- 
^ ing step. In the updating step, a contents use condition in- 
cluded in the license information obtained in the decrypting 
step is updated after the reproduction of the contents in the 
5 reproducing step. in the encrypting step, updated license 
information including the contents use condition updated in 
the updating step replacing the contents use condition in- 
cluded in the license information obtained in the decrypting 
step is encrypted with the device ID of the license storing 

10 device carried by the user. In the overwriting step, the li- 
cense information stored in the license storing device car- 
ried by the user is overwritten with the updated license 
information encrypted in the encrypting step. 

In the above contents reproducing method, the contents 

15 use condition can be updated when it changes after reproduc- 
tion of the contents, and thus the correct contents use con- 
dition can be retained. 



BRIEF DESCRIPTION OF THE DRAWINGS 

20 FIG. 1 is an illustration of the construction of a con- 

tents providing system in Embodiment 1 of the present inven- 
tion. 

FIG. 2 is a block diagram showing specific constructions 
of a memory card and a license issuing device shown in FIG. 
25 1. 

15 



FIG. 3 shows a data structure of a database where the 
, contents title, the contents ID, and the contents decryption 
key are associated with one another. 

FIG. 4 is a flowchart showing a procedure of issuance of 
5 license information by the license issuing device shown in 
FIG. 2. 

FIG. 5 shows information stored in a license storing 
means of the memory card. 

FIG- 6 is a flowchart showing a procedure of mutual 
10 verification between the memory card and the license issuing 
device. 

FIG. 7 is a block diagram showing specific constructions 
of the memory card and a contents reproducing device shown in 
FIG. 1. 

15 FIG. 8 is a flowchart showing a procedure of reproduc- 

tion of contents by the contents reproducing device shown in 
FIG. 7. 

FIG. 9 is a block diagram showing a construction of a 
contents reproducing device in Embodiment 2 of the present 
20 invention. 

FIG. 10 illustrates an example of application of the 
contents providing system shown in FIG. 1. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

25 Hereinafter, preferred embodiments of the present inven- 
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tion will be described with reference to the accompanying 
^ drawings. The same or similar components are denoted by the 
same reference numerals, and the description thereof is not 
repeated. Note that the present invention does not impose 
5 any limitation on the cryptographic algorithm. However, in 
the following description of the embodiments, a common key 
encryption scheme using the same key for encryption and de- 
cryption is assumed as the cryptographic algorithm unless 
otheirwise specified. 
10 (Embodiment 1) 

FIG. 1 illustrates a construction of a contents provid- 
ing system in Embodiment 1 of the present invention. As 
shown in FIG- 1, the contents providing system distributes 
digital contents that are electronic productions such as 

•15 software, music, and video (hereinafter, called merely "con- 
tents") and license information permitting use of these con- 
tents separately. The contents are encrypted and distributed 
as encrypted contents so that they are unusable in the form 
as they are. The encrypted contents are distributed in vari- 

20 ous ways such as on a network, by broadcasting, and in a 
package. 

A user who desires to receive contents inserts a memory 
card 100 into a license issuing device 200. The license is- 
suing device 200 encrypts license information permitting use 
25 of the contents desired by the user with device ID of the 

17 



memory card 100 carried by the user and writes the encrypted 
license information in the memory card 100. That is, only 
the encrypted license information is written in the memory 
card 100. The user then inserts the memory card 100 with the 
encrypted license information written therein into a contents 
reproducing device 300. The contents reproducing device 300 
decrypts the license information written in the memory card 
100 carried by the user with the device ID of the memory card 
100. The contents reproducing device 300 then decrypts en- 
crypted contents corresponding to the contents of which use 
is permitted in the decrypted license information, and repro- 
duces the decrypted contents. in this way, contents and li- 
cense information permitting use of the contents are provided. 

Hereinafter, specific constructions of the memory card 
100, the license issuing device 200, and the contents repro- 
ducing device 300 shown in FIG. 1 will be described in detail, 
together with a procedure of issuance of license information 
by the license issuing device 200 and a procedure of repro- 
duction of contents by the contents reproducing device 300. 

FIG. 2 is a block diagram showing specific constructions 
of the memory card 100 and the license issuing device 200 
shown in FIG. 1. 

<Construction of memory card 100> 

The memory card 100 is a portable independent hardware 
unit having uniquely identifiable device ID. The memory card 



100 includes a device ID read means 110, a partner device 
. verification means 120, and a license storing means 130. 

The device ID read means 110 reads and outputs the de- 
vice ID of the memory card 100. 
5 The partner device verification means 120 verifies 

whether or not a partner device to/from which license infor- 
mation is transmitted/received is a valid device. The part- 
ner device is the license issuing device 200 in the case of 
receiving license information from the license issuing device 

10 200 and the contents reproducing device 300 in the case of 
receiving reproduction of contents from the contents repro- 
ducing device 300. The partner device verification means 120 
is necessary to exclude a fraud license issuing device that 
attempts to issue unusable license information and get a li- 

15 cense fee. 

The license storing means 130 stores encrypted license 
infoznnation received from the license issuing device 200. A 
flash memory, for example, may be used as the license storing 
means 130. 

20 <Construction of license issuing device 200> 

The license issuing device 200 includes a memory card 
verification means 210, a contents ID input means 220, a con- 
tents use condition input means 230, a contents decryption 
key acquiring means 240, a linking means 250, and an encryp- 

25 tion means 260. 

19 



The memory card verification means, 210 verifies whether 
or not the memory card 100 is a valid one. Prior to verifi- 
cation, the memory card verification means 210 acquires the 
device ID from the memory card 100 and, after mutual verifi- 
cation with the memory card 100, encrypts the device ID and 
outputs the encrypted device ID. This is done to allow the 
contents reprodiacing device 300 to obtain the same key during 
reproduction of contents. 

The contents ID input means 220 outputs contents ID of 
the contents designated by the user. The contents ID refers 
to a code for identifying the contents. As an example of the 
contents ID input means 220, usable is a means that directly 
prompts the user to input contents ID of desired contents via 
an input device such as a keyboard and a touch panel and out- 
puts the input contents ID as it is. As another example, us- 
able is a means that displays a list of contents titles 
available for issuance of license information and urges the 
user to select a desired one. Contents ID corresponding to 
the selected contents title is retrieved from a database as 
shown in FIG. 3 where the contents title 31 and the contents 
ID 32 are associated with each other. In the database shown 
in FIG. 3, the contents title 31, the contents ID 32, and the 
contents decryption key 33 are associated with one another. 
The information of the contents decryption key 33 is pro- 
tected from retrieval from outside. 



The contents use condition input means 230 outputs a 
, contents use condition. The contents use condition refers to 
information indicating a restriction on the occasion of use 
of contents. For example, when the contents are a software 
5 program, the contents use condition may be information indi- 
cating a restriction that "the data amount handled is up to 
100 K bytes". In another example where the contents are mu- 
sic data, the contents use condition may be information indi- 
cating "the period during which reproduction is permitted". 

10 There are various candidates of contents use conditions de- 
pending on the characteristics of the contents. Therefore, 
use condition databases may be provided for the respective 
contents or respective categories of contents. in this case, 
also, as in the contents ID input means 220 described above, 

15 a list of use conditions may be displayed to prompt the user 
to select from the list. 

The contents decryption key acquiring means 240 receives 
the contents ID from the contents ID input means 220 and ac- 
quires a key for decrypting the encrypted contents corre- 

20 sponding to the contents ID. For example, the key may be 
acquired by referring to the database shown in FIG. 3. 

The linking means 250 links the contents ID from the 
contents ID input means 220, the contents use condition from 
the contents use condition input means 230, and the contents 

25 decryption key from the contents decryption key acquiring 
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means 240, to produce license information. 

The encryption means 260 encrypts the license informa- 
tion produced by the linking means 250 with the encrypted de- 
vice ID from the memory card verification means 210, to 
produce encrypted license information. The encryption means 
260 writes the encrypted license information in the license 
storing means 130 of the memory card 100. 

<Procedure of issuance of license information> 
FIG. 4 is a flowchart showing a procedure of issuance of 
license information by the license issuing device 200 shown 
in FIG. 2. With reference to FIG. 4 together with FIG. 2, 
the procedure of issuance of license information will be de- 
scribed. 

First, in step ST401, the user inserts the memory card 
100 into an insertion slot of the license issuing device 200. 
By this insertion, a pin of the memory card 100 comes into 
electrical contact with a socket of the license issuing de- 
vice 200, to thereby secure a communication medium for data 
transmission/reception between the memory card 100 and the 
license issuing device 200. 

In step ST402, the memory card 100 and the license issu- 
ing device 200 mutually verify that they are valid devices to 
each other. This procedure of mutual verification will be 
described later in detail. if an error occurs during the mu- 
tual verification, the processing is discontinued, and the 



user is notified of this error. After the mutual verifica- 
, tion, the memory card verification means 210 encrypts the de- 
vice ID of the memory card 100 to produce encrypted device ID. 
In step ST403, the user inputs contents ID corresponding 
5 to desired contents via the contents ID input means 220. In 
this way, the contents ID of the contents desired by the user 
is obtained. 

In step ST404, the user inputs a contents use condition 
via the contents use condition input means 230. In this way, 
10 the contents use condition desired by the user is obtained. 

In step ST405, the user pays a fee determined depending 
on the contents and the use condition desired by the user. A 
known means /method may be adopted for payment of the fee. 

In step ST406, the contents decryption key acquiring 
15 means 240 acquires a key for decrypting the encrypted state 
of the contents corresponding to the contents ID obtained in 
step ST403 . In this embodiment, the key is acquired by re- 
ferring to the database shown in FIG. 3. 

In step ST407, the linking means 250 links the contents 
20 ID obtained in step ST403, the contents use condition ob- 
tained in step ST404, and the contents decryption key ob- 
tained in step ST406, to produce license information. 

In step ST408, the encryption means 260 encrypts the li- 
cense information obtained in step ST407 with the encrypted 
25 device ID obtained in step ST402, to produce encrypted li- 



cense information. 

In step ST409, the encryption means 260 writes the en- 
crypted license information obtained in step ST408 in the li- 
cense storing means 130 of the memory card 100. In general 
5 a plurality of units of encrypted license information for a 
plurality of contents are stored in the license storing means 
130 of the memory card 100. For distinguishing one from an- 
other, therefore, as shown in FIG. 5, the contents title 51, 
the contents additional information 52, and the like are also 

10 written in association with the encrypted license information 
53 in the license storing means 130. This facilitates the 
user to identify desired contents out of a plurality of units 
of encrypted license information at later use. 

Thus, the license information for the contents desired 

15 by the user is written in the license storing means 130 of 
the memory card 100 carried by the user. 

As described above, the license issuing device 200 in 
Embodiment 1, which is provided with the memory card verifi- 
cation means 210 and the encryption means 260, can store the 

20 license information separated from the contents in the memory 
card 100 that has been recognized as valid. 

The contents proper desired by the user are not written, 
but only the license information for the contents is written 
in the memory card 100 carried by the user- Therefore, even 

25 when the contents desired by the user are large in capacity. 



the time required for issuance of the license information 
does not increase. Also, there is no need to worry about the 
memory capacity of the license storing means 130 of the mem- 
ory card 100. 

5 Moreover, since the data amount of the license informa- 

tion is small compared with the data amount of the contents, 
the user can obtain a large number of contents with one mem- 
ory card 100. 

In this embodiment, the license information produced by 
10 the linking means 250 includes the contents use condition - 
The contents use condition may not be used, and only the con- 
tents ID and the contents decryption key may be linked to 
produce license information. In this case, it is not neces- 
sary to provide the contents use condition input means 230. 
15 Alternatively, the contents decryption key may not be 

used, and only the contents ID and the contents use condition 
may be linked to produce license information. In this case, 
it is not necessary to provide the contents decryption key 
acquiring means 240. instead, however, the contents repro- 
20 ducing device 300 must be provided with a contents decryption 
key acquiring means . 

<Procedure of mutual verif ication> 

The procedure of mutual verification in step ST402 shown 
in FIG. 4 will be described with reference to FIG. 6 together 
25 with FIG. 2. Note that in FIG. 6, steps ST601 through ST606 



represent processing of the partner device verification means 
120 of the memory card 100, while steps ST611 through ST616 
represent processing of the memory card verification means 
210 of the license issuing device 200. 
5 Prior to the verification, the memory card verification 

means 210 of the license issuing device 200 acquires the de- 
vice ID (id) from the memory card 100. Thus, the device ID 
(id) is shared in advance by the memory card 100 and the li- 
cense issuing device 200. In addition, the memory card 100 

10 has a device key Kdl while the license issuing device 200 has 
a device key Kd2. The device keys Kdl and Kd2 are retained 
by the respective devices and protected from being read ex- 
ternally. Desirably, they are protected with a tamper- 
resistant device of which analysis is substantially impossi- 

15 ble. Assume that the device keys Kdl and Kd2 are the same 
when the memory card 100 and the license issuing device 200 
are both valid ones to each other. 

First, in step ST601, the partner device verification 
means 120 of the memory card 100 produces encrypted device ID 

20 (Eil), which is obtained by encrypting the device ID (id) of 
the memory card 100 with the device key Kdl . This encrypted 
device ID is represented by Eil=F(Kdl, id) in FIG. 6. 

In step ST611, the memory card verification means 210 of 
the license issuing device 200 produces encrypted device ID 

25 (Ei2), which is obtained by encrypting the device ID (id) of 



the memory card 100 with the device key Kd2 . This encrypted 
^ device ID is represented by Ei2=F(Kd2, id) in FIG. 6. 

It is then confirmed that the encrypted device IDs (Eil, 
Ei2) held by the respective devices are the same in the fol- 
5 lowing processing without involving any exchange via an ex- 
ternal communication medium, to thereby verify that they are 
authorized devices. 

In step ST602, the partner device verification means 120 
of the memory card 100 generates a random number Rl and 
10 transmits the random number to the memory card verification 
means 210 of the license issuing device 200. 

In step ST603, the partner device verification means 120 
of the memory card 100 encrypts the random number Rl with the 
encrypted device ID (Eil) to generate an encrypted random 
15 number Elrl, which is represented by Elrl=E(Eil, Rl) in FIG- 
6. 

In step ST612, the memory card verification means 210 of 
the license issuing device 200 encrypts the received random 
number Rl with the encrypted device ID (Ei2) to generate an 

20 encrypted random number E2rl, which is represented by 
E2rl=E(Ei2, Rl ) in FIG. 6. The memory card verification 
means 210 of the license issuing device 200 then transmits 
the encrypted random number E2rl to the partner device 
verification means 120 of the memory card 100. 

25 In step ST604, the partner device verification means 120 
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of the memory card 100 .compares the encrypted random number 
• Elrl generated in step ST603 with the encrypted random number 
E2rl received in step ST612. If the two encrypted random 
numbers do not match with each other, the process proceeds to 
5 step ST606, where the partner device verification means 120 
regards the license issuing device 200 as invalid (error oc- 
curs) and notifies the user of this fact. The process is 
then terminated. On the contrary, if the two encrypted ran- 
dom numbers match with each other, the partner device verifi- 

10 cation means 120 regards the license issuing device 200 as 
valid, and the process proceeds to step ST605. 

In step ST613, the memory card verification means 210 of 
the license issuing device 200 generates a random number R2 
and transmits the random number to the partner device 

15 verification means 120 of the memory card 100. 

In step ST614, the memory card verification means 210 of 
the license issuing device 200 encrypts the random number R2 
with the encrypted device ID (Ei2) to generate an encrypted 
random number E2r2, which is represented by E2r2=E(Ei2, R2) 

20 in FIG. 6. 

In step ST605, the partner device verification means 120 
of the memory card 100 encrypts the received random number R2 
with the encrypted device ID (Eil) to generate an encrypted 
random number Elr2, which is represented by Elr2=E(Eil, R2) 
25 in FIG. 6. The partner device verification means 120 of the 



memory card 100 then transmits the encrypted random number 
r Elr2 to the memory card verification means 210 of the license 
issuing device 200. 

In step ST615, the memory card verification means 210 of 
5 the license issuing device 200 compares the encrypted random 
number E2r2 generated in step ST614 with the encrypted random 
number Elr2 received in step ST605. If the two encrypted 
random numbers do not match with each other, the process pro- 
ceeds to step ST616, where the memory card verification means 
10 210 of the license issuing device 200 regards the memory card 
100 as invalid (error occurs) and notifies the user of this 
fact. The process is then terminated. On the contrary, if 
the two encrypted random numbers match with each other, the 
memory card verification means 210 of the license issuing de- 
ls vice 200 regards the memory card 100 as valid. 

As described above, mutual verification is performed be- 
tween the memory card 100 and the license issuing device 200 
to confirm that they are valid devices to each other. 

After the procedure of mutual verification, the memory 
20 card verification means 210 outputs the encrypted device ID 
(Ei2) to the encryption means 260. 

In the above description, the device keys Kdl and Kd2 
are used. Alternatively, the encrypted device IDs Eil and 
Ei2 may be obtained without using the device keys but by sub- 
25 jecting the device IDs to specific transformation F. In this 



case, the transformation F is made secret, and devices having 
a common transformation method are verified as valid ones to 
each other. 

<Construction of contents reproducing device 300> 

FIG. 7 is a block diagram showing specific constructions 
of the memory card 100 and the contents reproducing device 
300 shown in FIG. 1. Hereinafter, the specific construction 
of the contents reproducing device 300 will be described with 
reference to FIG. 7. 

The contents reproducing device 300 includes a memory 
card verification means 210, a contents ID input means 220, a 
decryption means 310, a separation means 320, a comparison 
means 330, a reproduction means 340, and an encrypted con- 
tents database 350. 

The decryption means 310 reads the encrypted license in- 
formation stored in the license storing means 130 of the mem- 
ory card 100 and decrypts the read encrypted license 
information with the encrypted device ID received from the 
memory card verification means 210, to obtain license infor- 
mation. 

The separation means 320 obtains the contents ID, the 
contents use condition, and the contents decryption key from 
the license information obtained by the decryption means 310. 

The comparison means 330 compares the contents ID ob- 
tained by the separation means 320 with the contents ID ob- 



tained from the contents ID input means 220. If -the two con- 
tents IDs match with each other, the comparison means 330 
sends a reproduction instructing signal to the reproduction 
means 340. 

5 The encrypted contents database 350 stores encrypted 

contents that are unusable in the state as they are. 

In response to the reproduction instructing signal from 
the comparison means 330/ the reproduction means 340 re- 
trieves the encrypted contents corresponding to the contents 
10 ID obtained by the separation means 320 from the encrypted 
contents database 350. The reproduction means 340 then de- 
crypts the retrieved encrypted contents with the contents de- 
cryption key obtained by the separation means 320, and 
reproduces the decrypted contents according to the contents 
15 use condition obtained by the separation means 320. 
<Procedure of reproduction of contents> 

FIG. 8 is a flowchart showing a procedure of reproduc- 
tion of contents by the contents reproducing device 300 shown 
in FIG. 7. Hereinafter, the procedure of reproduction of 
20 contents will be described with reference to FIG. 8 together 
with FIG. 7. 

First, in step ST801, the user inserts the memory card 
100 into an insertion slot of the contents reproducing device 
300. In the memory card 100, encrypted license information 
25 for contents of which reproduction is desired is stored. By 
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this insertion, .the pin of the memory card 100 comes into 
electrical contact with a socket of the contents reproducing 
device 300, to thereby secure a communication medium for data 
transmission/reception between the memory card 100 and the 
contents reproducing device 300. 

In step ST802, the memory card 100 and the contents re- 
producing device 300 mutually verify that they are valid de- 
vices to each other. This mutual verification is performed 
in a procedure similar to that shown in FIG. 6. After the 
mutual verification, the memory card verification means 210 
of the contents reproducing device 300 encrypts the device ID 
of the memory card 100 to produce encrypted device ID. 

In step ST803, the user inputs contents ID corresponding 
to contents of which reproduction is desired via the contents 
ID input means 220. In general, a plurality of units of en- 
crypted license information are stored in the license storing 
means 130 of the memory card 100. As shown in FIG. 5, how- 
ever, the license storing means 130 stores the contents title 
51, the contents additional information 52, and the like in 
association with the encrypted license information 53. 
Therefore, it is possible to display a list of contents title 
and contents additional information stored in the license 
storing means 130 of the memory card 100, to enable the user 
to select a desired contents title. in this way, the con- 
tents ID can be obtained using a database similar to that 
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shown in FIG. 3. 

In step ST804, the decryption means 310 reads the en- 
crypted license information corresponding to the contents of 
which reproduction is desired by the user from the license 
5 storing means 130 of the memory card 100. in this embodiment, 
the encrypted license information to be decrypted can be eas- 
ily specified from the contents title selected by the user in 
step ST803. The decryption means 310 then decrypts the read 
encrypted license information with the encrypted device ID 
10 produced by the memory card verification means 210 in step 
ST802, to obtain license information. 

in step ST805, the separation means 320 separates the 
license information obtained by the decryption means 310 into 
the contents ID, the contents decryption key, and the con- 
15 tents use condition. 

in step ST806, the comparison means 330 compares the 
contents ID obtained via the contents ID input means 220 in 
step ST803 with the contents ID obtained by the separation 
means 320 in step ST805. As a result of the comparison, if 
20 the two contents IDs match with each other, it is regarded 
that the license information has been issued by a valid li- 
cense issuing device. The comparison means 330 then sends 
the reproduction instructing signal to the reproduction means 
340. 

25 In step ST807, in response to the reproduction instruct- 
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ing signal from the comparison means 330, the reproduction 
• means 340 retrieves the encrypted contents corresponding to 
the contents ID obtained by the separation means 320 from the 
encrypted contents database 350. The reproduction means 340 
5 then decrypts the retrieved encrypted contents with the con- 
tents decryption key obtained by the separation means 320, 
and reproduces the decrypted contents according to the con- 
tents use condition obtained by the separation means 320. 
For example, when an expiry date is added as a contents use 
10 condition, the current date and the expiry date are compared 
prior to reproduction to determine whether or not reproduc- 
tion should be performed. 

Thus, the contents desired by the user are reproduced. 
As described above, the contents reproducing device 300 
15 in Embodiment 1, which is provided with the memory card veri- 
fication means 210, the decryption means 310, and the repro- 
duction means 340, can read license information separated 
from the contents from the memory card 100 that has been 
verified as valid, and reproduce the corresponding contents. 
20 In this embodiment, the encrypted contents database 350 

was formed in the contents reproducing device 300. Alterna- 
tively, the encrypted contents database may be provided ex- 
ternally at a remote place, for example, and connected via a 
communication line. In this case, the contents reproducing 
25 device 300 receives encrypted contents from an external en- 
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crypted contents database by specifying the contents using 
information such as contents ID, and reproduces the received 
contents. This construction of providing the encrypted con- 
tents database externally is advantageous for an application 
where the contents reproducing device is a portable terminal 
that fails to secure a large memory capacity. 

When no contents use condition is included in the li- 
cense information stored in the license storing means 130 of 
the memory card 100, no contents use condition is obtained by 
the separation means 320. in this case, the contents repro- 
duction means 340 does not need to consider any contents use 
condition. 

When no contents decryption key is included in the li- 
cense information stored in the license storing means 130 of 
the memory card 100, a database associating the contents ID 
with the contents decryption key as shown in FIG. 5 should be 
prepared. with such a database, the contents decryption key 
can be retrieved using the contents ID obtained by the sepa- 
ration means 320. 

When the encrypted license information read from the li- 
cense storing means 130 of the memory card 100 is suffi- 
ciently reliable, the contents ID input means 220 and the 
comparison means 330 may be omitted. 

The encryption means 260 of the license issuing device 
200 shown in FIG. 2 and the decryption means 310 of the con- 
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tents reproducing device 300 shown in FIG. 7 use the en- 
crypted device ID from the memory card verification means 210 
as the encryption/decryption key. Alternatively, the license 
issuing device 200 and the contents reproducing device 300 
may previously store an externally non-readable secret key, 
and this key may be used as the encryption/decryption key. 
Further, in this case, asymmetric encryption such as RSA may 
be adopted as cryptographic algorithm for encryp- 
tion/decryption, and the devices may store respective corre- 
sponding keys . 
<Ef fects> 

As described above, according to the contents providing 
system in Embodiment 1 of the present invention, the license 
issuing device 200 writes license information for contents in 
the memory card 100 as a portable independent hardware unit. 
The contents reproducing device 300 reproduces the contents 
according to the license information stored in the memory 
card 100. This enables the user, who carries the memory card 
100 in which license information of desired contents has been 
written, to receive the contents using any of the contents 
reproducing devices 300 in various forms compatible with the 
license issuing device 200. in other words, the user can use 
the purchased contents without being restricted in the form 
of the contents reproducing device 300. 

The license information is encrypted /decrypted with the 
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encrypted device ID. In other words,. the license information 
is encrypted /decrypted with device ID that can uniquely iden- 
tify the individual memory card 100. This makes it possible 
to prevent fraud such as attempting to receive contents using 
a memory card in which encrypted license information has been 
illegally duplicated. 

The license issuing device 200 writes only license in- 
formation for contents in the memory card 100 carried by the 
user. Therefore, even when the contents desired by the user 
is large in capacity, the time required for issuance of the 
license information does not increase. Also, there is no 
need to worry about the memory capacity of the license stor- 
ing means 130 of the memory card 100. 

Moreover, since the data amount of the license informa- 
tion is small compared with the data amount of the contents, 
the user can obtain a large number of contents with one mem- 
ory card 100. 

The contents are distributed in the encrypted state. To 
reproduce the contents, the user must purchase license infor- 
mation for the contents. This enables the contents to be re- 
leased freely by any means such as on a network, by 
broadcasting, and in a package. This also enables the user 
to obtain the contents easily. The user does not necessarily 
have to own the contents, but may purchase and carry only the 
license information to access the contents as required. As a 



resuLt, when the user fails to secure a large-capacity data 
accumulating device for accumulating the contents, data may 
be downloaded on an as-needed basis during reproduction of 
the contents. This virtually provides an effect similar to 
5 that obtained when the user owns a contents server having an 
infinite capacity. On the contrary, when the user can secure 
a large-capacity data accumulating device, all of the con- 
tents that the user intends to reproduce may be downloaded in 
advance. When actually reproducing, the user may purchase 
10 license information for the contents. This makes it possible 
to promptly reproduce contents having a large capacity that 
otherwise takes time to be downloaded. 

(Embodiment 2) 

15 A contents providing system in Embodiment 2 of the pre- 

sent invention includes a contents reproducing device 900 
shown in FIG. 9, in place of the contents reproducing device 
300 shown in FIG. 7. The other construction is the same as 
that of the contents providing system in Embodiment 1 . 

20 <Construction of contents reproducing device 900> 

Referring to FIG. 9, the contents reproducing device 900 
includes a memory card verification means 210, a contents ID 
input means 220, a decryption means 310, a separation means 
320, a comparison means 330, a reproduction means 340, an en- 

25 crypted contents database 350, a contents use condition up- 
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dating means 910, a linking means 320, an encryption means 
930, and an encrypted license information updating means 940. 

In addition to the operation described in Embodiment 1, 
the reproduction means 340 generates and outputs a reproduc- 
tion detected signal indicating completion of reproduction of 
contents, and also outputs the contents use condition. 

Upon receipt of the reproduction detected signal from 
the reproduction means 340, the contents use condition updat- 
ing means 910 reads the contents use condition from the re- 
production means 340, and produces updated contents use 
condition by updating the contents use condition. This means 
is provided in consideration of the case that the contents 
use condition changes between before and after the reproduc- 
tion of the contents {for example, the case that "the number 
of times of use of the contents" is set as a contents use 
condition). When the number of times of use has a limitation, 
the number of remaining times of use must be decremented by 
one every reproduction, and the decremented number of times 
of use must be entered as the new contents use condition. 

The linking means 920 links the updated contents use 
condition from the contents use condition updating means 910 
with the contents ID and the contents decryption key from the 
separation means 320, to produce updated license information. 

The encryption means 930 encrypts the updated license 
information from the linking means 920 with the encrypted de- 



vic£ ID from the memory card verification means 210, to pro- 
duce updated encrypted license information. 

The encrypted license information updating means 940 
overwrites the encrypted license information stored in the 
license storing means 130 of the memory card 100 with the up- 
dated encrypted license information produced by the encryp- 
tion means 930. 

<Operation of contents reproducing device 900> 

The operation of the contents reproducing device 900 
shown in FIG. 9 will be described. 

The contents reproducing device 900 reproduces contents 
in substantially the same manner as that shown in steps ST801 
through ST807 in FIG. 8. After completion of the reproduc- 
tion of the contents or during the reproduction of the con- 
tents, the reproduction means 340 outputs the reproduction 
detected signal to the contents use condition updating means 
910. 

On receipt of the reproduction detected signal, the con- 
tents use condition updating means 910 reads the contents use 
condition from the reproduction means 340 and updates a por- 
tion of the contents use condition that should be changed af- 
ter the reproduction. For example, when there exists a 
contents use condition that "the number of times of reproduc- 
tion is limited to 3", the number of times of reproduction is 
decremented by one to change to 2. The resultant contents 
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use condition is output to the linking means 920 as the up- 
dated contents use condition. 

The linking means 920 links the updated contents use 
condition with the contents ID and the contents decryption 
key, to produce updated license infomation. 

The encryption means 930 encrypts the updated license 
information with the encrypted device ID. 

The encrypted license information updating means 940 
erases the encrypted license information stored in the li- 
cense storing means 130 of the memory card 100 and writes the 
updated encrypted license information. 

<Effect> 

As described above, the contents reproducing device 900 
in Embodiment 2, which is provided with the contents use con- 
dition updating means 910, the linking means 920, the encryp- 
tion means 930, and the encrypted license information 
updating means 940, can update a contents use condition when 
the contents use condition changes after reproduction of the 
contents, and thus can retain the correct contents use condi- 
tion. 

( Embodiment 3 ) 

FIG. 10 shows an example of application of the contents 
providing system shown in FIG. 1. This example of applica- 
tion of the contents providing system will be described with 



reference to FIG. 10. 

The license issuing device 200 may be installed in a 
station, in a convenience store, or in front of a store, for 
example (200a), or may be connected to a network to which a 
5 terminal 400 such as a personal computer and a cellular phone 
is accessible via a line or by wireless (200b). The user in- 
serts the memory card 100 into the license issuing device 
200a or a terminal 400, selects desired contents (a music 
number, a film, a game, an electronic book, or the like) un- 

10 der guidance, and pays a fee displayed. The license issuing 
device 200a, 200b encrypts license information for the con- 
tents selected by the user with device ID of the memory card 
100 and writes the encrypted license information in the mem- 
ory card 100- Upon completion of the writing, the user re- 

15 ceives a receipt and pulls out the memory card 100. in this 
way, the user can receive encrypted license information for 
desired contents written in the memory card 100 at home or on 
the road. The user no more needs to carry a medium such as 
CD and MD in which desired contents have been stored, but may 

20 carry only the memory card 100 in which only license informa- 
tion has been written. 

The contents have been encrypted to prevent use in the 
form as they are, and encrypted contents are available by 
various means such as on a network, by broadcasting, and in a 

25 package. 

42 



In a home server 350a installed in the home of the user, 
accumulated are encrypted contents downloaded to a personal 
computer via a network, encrypted contents obtained from 
digital TV data broadcasting, and the like. The user inserts 
the memory card in which encrypted license information of de- 
sired contents has been written to a contents reproducing de- 
vice 300a in the home, and receives the contents. 

On the road, also, a contents server 350b and a contents 
reproducing device 300b are installed (in a train, an air- 
plane, a car, a store, a hotel, and the like). The contents 
reproducing device 300b may be installed by the provider of 
the contents, or the portable terminal carried by the user 
may be used as the contents reproducing device. The user in- 
serts the memory card in which encrypted license information 
for desired contents has been written into the contents 
reproducing device 300b to receive the contents. 

The contents provider can enjoy merits from providing an 
abundance of contents, such as the effect of attracting cus- 
tomers, exhibiting differentiation, and collecting fees. in 
addition, an advertisement may be displayed during reproduc- 
tion of contents to earn advertisement income or introduce 
the provider's own stores. Moreover, a contents reproducing 
device enhanced in sound and image qualities may be installed 
to collect an extra charge (for example, an extra charge of 
100 yen may be collected for high-definition images). 
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The user can listen to a favorite music number at home 
in a car, in a train, in a boat, in an airplane, and the like 
The user no more needs to carry a medium such as CD and MD 
and a reproducing unit, but may carry only one memory card. 

The user can also enjoy various types of contents such 
as listening to music, seeing a film, reading a book, and 
playing a game in a private room space that is currently in 
vogue. The provider of the private room space may permit the 
user to use the private room space free of charge when the 
user has a memory card in which license information has been 
written. If a license issuing device is installed around the 
private room space, the user can purchase license information 
on the spot when no license information has been written in 
the memory card. 

Moreover, the user can access a magazine (contents) pur- 
chased before start of a trip to check the sights to visit on 
the road. By consulting in this way, the user no more needs 
to carry a magazine, a paper, an encyclopedia, and the like. 

While the present invention has been described in a pre- 
ferred embodiment, it will be apparent to those skilled in 
the art that the disclosed invention may be modified in nu- 
merous ways and may assume many embodiments other than that 
specifically set out and described above. Accordingly, it is 
intended by the appended claims to cover all modifications of 
the invention which fall within the true spirit and scope of 
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the invention. 
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